Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3139302e39332e3138342e302f32332d3233203d3e20323732303236.roa
File:                     3139302e39332e3138342e302f32332d3233203d3e20323732303236.roa (raw, json)
Hash identifier:          SS2HsOu9itdeeFJqQp8BKUXIrg7reND5jmY6HzAgJsU=
Subject key identifier:   CD:A7:3E:B6:B2:1F:F9:13:92:F9:90:DB:60:AD:CE:93:9E:A4:A6:7D
Certificate issuer:       /CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
Certificate serial:       087ADD31C0DFF9A7CA49DB82E1EB1A35956FCF0B
Authority key identifier: 3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3139302e39332e3138342e302f32332d3233203d3e20323732303236.roa
Signing time:             Tue 29 Jul 2025 18:55:00 +0000
ROA not before:           Tue 29 Jul 2025 18:50:00 +0000
ROA not after:            Tue 28 Jul 2026 18:55:00 +0000
asID:                     272026
IP address blocks:        190.93.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Aug 2025 07:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7a:dd:31:c0:df:f9:a7:ca:49:db:82:e1:eb:1a:35:95:6f:cf:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C3B7B469CAC485C79640430F65FB7E54F99A890
        Validity
            Not Before: Jul 29 18:50:00 2025 GMT
            Not After : Jul 28 18:55:00 2026 GMT
        Subject: CN=CDA73EB6B21FF91392F990DB60ADCE939EA4A67D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:07:cb:cb:e1:3e:14:e2:de:81:be:1a:bd:fe:
                    d1:3f:cd:ff:90:1f:78:07:8c:59:5e:ad:ef:d5:a8:
                    a5:fc:23:7c:29:9d:bf:1a:25:ef:41:86:e4:d6:e1:
                    80:ba:2c:55:ac:e0:bb:04:4a:57:c7:eb:c5:3b:cd:
                    6e:77:94:b1:71:62:75:98:a2:1a:68:e4:25:a3:48:
                    1d:9a:94:c6:09:f6:40:b7:ab:f5:36:d7:3b:a9:26:
                    e2:5f:72:61:5f:8d:eb:44:74:4f:b8:2c:0f:d4:f0:
                    2e:33:24:ab:76:ee:8c:64:60:37:aa:22:2c:b4:a5:
                    af:5e:14:a5:c2:b7:e5:9a:da:ce:dc:bf:6b:50:5c:
                    ff:be:ec:d2:28:f3:b1:c6:83:c6:74:6c:c7:a4:98:
                    cf:fa:8b:f6:86:b5:cd:e9:6e:0f:ab:83:f9:58:63:
                    56:e2:f2:c5:3b:d2:bf:00:5c:8e:29:f3:69:a9:ea:
                    ea:17:96:6f:f0:f6:46:f0:07:29:4a:d4:3b:7e:1d:
                    15:a9:46:73:ae:3a:c7:69:da:29:e2:c1:49:57:fd:
                    e3:49:46:05:9a:fe:d1:6b:db:b1:32:63:16:1e:bb:
                    b9:1f:0a:16:af:31:d4:85:14:04:cb:b2:e2:cd:92:
                    0f:a0:2e:f0:1a:55:ab:38:e2:ca:ef:77:c7:a5:4e:
                    20:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A7:3E:B6:B2:1F:F9:13:92:F9:90:DB:60:AD:CE:93:9E:A4:A6:7D
            X509v3 Authority Key Identifier:
                keyid:3C:3B:7B:46:9C:AC:48:5C:79:64:04:30:F6:5F:B7:E5:4F:99:A8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C3B7B469CAC485C79640430F65FB7E54F99A890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB5091115C1DA031B792EADFF54498AA3ACA566EAFC77F650EEB9BF8C6770728/0/3139302e39332e3138342e302f32332d3233203d3e20323732303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:f0:9e:dd:32:a4:ba:db:d3:26:c8:67:9c:fa:21:60:f0:79:
         1f:cc:19:65:6e:7b:79:cf:18:82:d0:fc:1b:d7:8e:43:5e:29:
         3b:e1:77:79:07:bc:c0:88:97:a4:4c:81:d0:99:1e:46:6a:d3:
         75:a5:d6:4a:1f:ec:87:e0:6d:8d:3e:5d:23:89:76:6f:33:bc:
         bd:85:d2:f2:1f:ae:92:33:23:66:e1:bf:40:af:dc:48:a1:ae:
         55:ef:a0:8e:af:74:8b:3e:88:5e:57:22:6c:a6:84:0e:96:c1:
         54:41:47:9d:69:88:d8:3b:83:30:60:2c:55:32:51:d5:cb:81:
         65:7b:25:d6:a9:58:8c:75:3c:96:99:2d:2f:05:51:05:e3:09:
         e1:dd:df:65:cf:01:bb:f7:11:1e:db:4e:75:a2:60:64:f8:05:
         96:99:b1:43:c9:4e:7c:de:a0:6b:4b:f7:23:0c:e6:c4:f3:03:
         e6:05:0f:e3:7e:bf:e6:cd:44:9c:71:c4:b6:6d:ea:e6:f1:ec:
         f1:66:38:48:58:e1:1c:f3:0f:6b:b1:ec:54:34:5e:d4:d8:bb:
         6a:cf:54:bb:fb:8d:3b:d7:88:53:ce:b5:78:a4:63:55:4e:9e:
         57:4b:e7:b8:e4:22:af:46:28:d2:ef:31:3d:a2:a1:38:d4:de:
         c8:04:83:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:39:56 2025 by rpki-client